This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=3023

wean_irdeh, posted Wed Aug 31, 2016 8:09 am (17083)

---

When I analyze using trid, the main executable contain windows executable, while the library (.x32) also contain exe, in addition to visual c and dll. I don't even know where the music located. Tried to use jaeder naub, but it reveals nothing


https://drive.google.com/file/d/0B92szf ... sp=sharing

aluigi, posted Wed Aug 31, 2016 11:21 am (17087)

---

PetSalon.exe is "packed" with Armadillo 7.0 but we can use it to our advantage without the need of decrypting it (moreover because it's totally useless to our needs).

Steps:

• run offzip against PetSalon.exe with the -a -1 options:
  Code:

  offzip.exe -a -1 PetSalon.exe output.dat

• use a file ripper like HyperRipper or any other tool listed on this topic to dump all the recognized files from output.dat
• There are over 5000 images and sounds as far as I can see

wean_irdeh, posted Thu Sep 01, 2016 12:42 am (17107)

---

the response is quick! thank you, I get files I want!!!